Encrypted Data Containers With Location Tags And Key Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managers of electronic networks face challenges in accurately, efficiently, and securely managing encrypted data across different storage containers, particularly in determining historical and current locations for quick recall and verifying encryption keys for decryption.

Innovation Solution

An encrypted data management system that identifies data containers, interrogates them to determine encryption, receives encryption keys and location identifiers, generates a string with tags, and decrypts the data based on verified keys, thereby securely managing encrypted data across multiple containers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If encrypted data is moved to different storage containers across the electronic network, then data availability and accessibility are improved, but the complexity of tracking data locations and verifying encryption integrity increases

Engineering Contradiction:
Improvedata accessibilityVSAvoiddata location tracking complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent introduces a data container as an intermediary object that encapsulates both the encrypted data and its metadata (location identifiers, encryption verification information). This mediator simplifies tracking by bundling all necessary information about the data's location and integrity state into a single manageable unit, reducing the complexity of monitoring data across multiple storage locations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary actions by pre-generating and storing verification information (hash values, encryption metadata) within the data container before the data is moved or accessed. This preliminary preparation enables quick verification of data integrity and location without requiring complex real-time computations when the data is accessed at its current location.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If multiple encryption keys are used to secure encrypted data across different containers, then security is improved, but the time required to verify keys and perform decryption increases

Engineering Contradiction:
Improveencryption securityVSAvoidkey verification time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-computing and storing verification information (such as hash values of encryption keys or metadata about key usage) within the data container. When decryption is needed, the system can quickly verify the appropriate key by comparing against this pre-stored information, significantly reducing the time required to validate multiple encryption keys while maintaining strong security.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If manual management of encrypted data locations and encryption verification is performed, then flexibility and control are improved, but the computational resources and time required increase

Engineering Contradiction:
Improvedata management flexibilityVSAvoiddata management efficiency
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent implements self-service by enabling the data container to carry its own verification information and location metadata. When the system needs to verify data integrity or locate encrypted data, the container provides its own verification data without requiring external manual intervention. This self-contained approach maintains flexibility in managing encrypted data across different locations while dramatically improving efficiency by eliminating manual verification processes.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20250260560A1Systems, methods, and apparatuses for generating data strings and for managing encrypted data in data containers in an electronic network
Publication Date: 2025.08.14 BANK OF AMERICA CORP
  • US20250260560A1 patent drawing
  • US20250260560A1 patent drawing
  • US20250260560A1 patent drawing

AI summary

Systems, computer program products, and methods are described herein for generating data strings and for managing encrypted data in data containers in an electronic network. The present invention is configured to identify at least one data container, wherein the at least one data container comprises encrypted data; interrogate the at least one data container; determine at least one encryption associated with the encrypted data of the data container; receive at least one encryption key associated with the encrypted data; receive at least one tag associated with the encrypted data, wherein the at least one tag comprises at least one location identifier associated with the encrypted data; generate a string for the data of the data container, wherein the string comprises the at least one tag; and decrypt the encrypted data of the data container based on the at least one encryption key.